$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/bfe33d2a-59c4-3b6f-8648-0cad65989753.roa File: bfe33d2a-59c4-3b6f-8648-0cad65989753.roa (raw, json) Hash identifier: CVJe88I9+ujzvW3zcvVJNPTFhmitdQ4d4mnOVoEbbdY= Subject key identifier: 6A:13:7D:F7:63:0A:ED:01:FB:86:92:F6:46:95:79:0A:1D:68:C8:F7 Certificate issuer: /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Certificate serial: 010D0C9F4328584AFAB68AD7AF26464D84541380 Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/bfe33d2a-59c4-3b6f-8648-0cad65989753.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 139.138.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8a:d7:af:26:46:4d:84:54:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=8d9d205e-5f76-4743-8f67-186ed0a5f480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:69:86:84:64:1b:a4:ef:68:83:6a:07:64: 48:d4:54:8a:fc:7e:53:9c:25:3d:07:ff:73:57:75: a9:22:bb:59:a2:34:ff:52:00:29:6d:56:05:e3:54: ff:f6:60:ed:8e:97:a1:32:33:1b:e3:bc:02:71:27: 94:0c:84:22:ed:04:b0:58:ae:74:42:24:bd:31:30: 99:5c:ff:7d:1b:07:a0:a8:a1:8b:c5:fb:f3:54:30: 93:d0:14:03:e1:47:82:b9:e9:95:e0:14:53:7f:2b: 29:50:48:a1:9c:9a:bf:4c:38:ca:ec:46:7d:4b:1b: f0:2c:69:02:bd:b8:66:3f:9a:4e:e9:d0:e0:9a:d4: cf:e5:72:23:3a:cb:64:e7:ee:ea:f5:e9:9a:82:1f: 64:ee:18:2b:49:9f:22:e9:db:97:90:39:93:70:8e: 55:6f:fd:ce:f5:d6:84:5e:26:93:d0:f3:29:70:95: 41:e1:00:0e:ce:4c:d3:5d:e4:26:d3:74:25:07:b2: 01:12:fa:36:80:68:88:66:a0:e8:c6:7a:11:ea:83: 14:f0:ce:17:66:11:6f:33:78:85:ae:4f:b2:d8:1a: 36:5c:6c:7f:f4:eb:2d:bc:69:ef:11:ea:fd:be:73: 22:04:af:e1:93:fa:4c:b2:d2:5b:93:54:6e:5f:5a: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:13:7D:F7:63:0A:ED:01:FB:86:92:F6:46:95:79:0A:1D:68:C8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/bfe33d2a-59c4-3b6f-8648-0cad65989753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl X509v3 Authority Key Identifier: keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer sbgp-ipAddrBlock: critical IPv4: 139.138.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f8:48:09:24:cb:2c:c9:f1:af:77:f4:e5:db:dc:4e:0b:1b: 48:c6:1a:43:40:25:3f:c8:3d:d4:90:3d:e9:52:aa:ef:21:44: 63:38:39:d9:02:60:90:28:c6:10:82:06:11:4c:f4:fb:d4:25: da:27:ae:f0:84:1d:39:c7:a1:0f:9e:aa:7e:f5:15:21:1f:b9: ca:34:4b:43:30:49:db:5b:29:3a:87:2c:5e:39:8e:a8:ee:f7: 71:26:8a:70:8e:14:c6:66:54:69:53:2a:90:1d:fb:8e:0e:7d: 2d:eb:d9:2a:9d:7e:35:ae:c7:7a:7c:10:c1:63:79:4f:a2:e3: 95:a9:9f:48:c8:89:ef:da:c4:c7:5e:00:ef:1b:85:85:ad:23: 68:2c:a1:d5:a7:8c:b6:0e:8a:c7:4b:0e:01:9c:13:e5:cd:41: 04:b7:23:d0:ce:3d:35:2b:86:72:15:66:eb:ce:f9:d9:07:6a: fb:82:bd:ed:c7:7e:0b:05:76:dc:5b:db:5c:6d:9f:d8:b7:07: 96:f0:db:db:53:4d:43:62:35:ac:08:7e:71:58:96:a6:32:84: ef:01:60:5c:e2:69:68:81:cc:30:81:f9:e6:02:13:b4:5b:5c: 97:af:a1:e4:19:cc:ff:0f:89:d0:f3:24:df:a6:a6:ca:16:5d: 62:e2:ca:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6torXryZGTYRUE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRi ZWViMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk OGQ5ZDIwNWUtNWY3Ni00NzQzLThmNjctMTg2ZWQwYTVmNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzRphoRkG6TvaINqB2RI1FSK/H5TnCU9B/9z V3WpIrtZojT/UgApbVYF41T/9mDtjpehMjMb47wCcSeUDIQi7QSwWK50QiS9MTCZ XP99GwegqKGLxfvzVDCT0BQD4UeCuemV4BRTfyspUEihnJq/TDjK7EZ9SxvwLGkC vbhmP5pO6dDgmtTP5XIjOstk5+7q9emagh9k7hgrSZ8i6duXkDmTcI5Vb/3O9daE XiaT0PMpcJVB4QAOzkzTXeQm03QlB7IBEvo2gGiIZqDoxnoR6oMU8M4XZhFvM3iF rk+y2Bo2XGx/9OstvGnvEer9vnMiBK/hk/pMstJbk1RuX1omOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoTffdjCu0B+4aS9kaVeQodaMj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVl ZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvYmZlMzNkMmEtNTljNC0z YjZmLTg2NDgtMGNhZDY1OTg5NzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDQ1ZWRmZjEtMzYwZC00YWUyLWEw NDUtY2NmN2RiYzRiZWViLzQ0NWVkZmYxLTM2MGQtNGFlMi1hMDQ1LWNjZjdkYmM0 YmVlYi5jcmwwHwYDVR0jBBgwFoAUALfGp0iKEmAtlAFMsF6IiFiwUZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3 ZGJjNGJlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4phMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr4SAkkyyzJ8a939OXb3E4LG0jGGkNAJT/IPdSQPelSqu8hRGM4OdkC YJAoxhCCBhFM9PvUJdonrvCEHTnHoQ+eqn71FSEfuco0S0MwSdtbKTqHLF45jqju 93EminCOFMZmVGlTKpAd+44OfS3r2SqdfjWux3p8EMFjeU+i45Wpn0jIie/axMde AO8bhYWtI2gsodWnjLYOisdLDgGcE+XNQQS3I9DOPTUrhnIVZuvO+dkHavuCve3H fgsFdtxb21xtn9i3B5bw29tTTUNiNawIfnFYlqYyhO8BYFziaWiBzDCB+eYCE7Rb XJevoeQZzP8PidDzJN+mpsoWXWLiypw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:16 2025 by rpki-client